threatagentperson orentity thatattempts orcarries out athreatassetsomethingthat hasvalue to theperson ororganizationIPAddressa series ofnumbers thatidentifies anydevice on anetworknation-stateextremelysophisticatedhacker that issponsored by oraffiliated with agovernmentalorganizationdefenseindeptha security approachthat combinesmultiple securitycontrols anddefenses to create acumulative effectthink likeanadversarystrategy thatallows you toanticipate attackstrategies anddefend yoursystemsaccordinglyintegrityensures thatdata is notmodified ortamperedwithenumerationprocess ofextracting usernames, machinenames, networkresources, sharesand services from asystemcybercriminalusually seek toexploit securityvulnerabilities forsome kind offinancial reward orrevengezerodayattack targeting asoftwarevulnerability whichis unknown to thesoftware vendor orto antivirus vendorsMACAddressa hardwareidentificationnumber thatuniquely identifieseach device on anetworkthreatanything thathas thepotential tocause the lossof an assetavailabilityensures theuptime of thesystem so thatdata isaccessiblewhen neededLinuxopen source andcommunity-developed operatingsystem forcomputers, servers,mainframes, mobiledevices andembedded devicesreconnaissancepractice ofcovertlydiscovering andcollectinginformationabout a systemconfidentialityensures thatdata is notdisclosed tounintendedpersons penetrationtestingattempt toevaluate thesecurity of an ITinfrastructure bysafely trying toexploitvulnerabilitiesscriptkiddieunsophisticatedthreat actorsthat find andrun attacks theyfind online exploita procedure orproduct that takesadvantage of avulnerability tocarry out a threatnon-repudiationprovidesvalidation ofa message'soriginvulnerabilitya weakness that allowsa threat to be carriedout, such as a USBport that is enabled onthe server hosting thedatabase or a serverroom door that isfrequently left ajarhactivistmisuse a computersystem or networkfor socially orpolitically motivatedreasonsPrincipleof LeastPrivilegeusers andprograms shouldonly have thenecessary accessto complete theirtasksIoTnetwork ofphysical objectsembedded withsensors andsoftwareconnected to theInternetthreatagentperson orentity thatattempts orcarries out athreatassetsomethingthat hasvalue to theperson ororganizationIPAddressa series ofnumbers thatidentifies anydevice on anetworknation-stateextremelysophisticatedhacker that issponsored by oraffiliated with agovernmentalorganizationdefenseindeptha security approachthat combinesmultiple securitycontrols anddefenses to create acumulative effectthink likeanadversarystrategy thatallows you toanticipate attackstrategies anddefend yoursystemsaccordinglyintegrityensures thatdata is notmodified ortamperedwithenumerationprocess ofextracting usernames, machinenames, networkresources, sharesand services from asystemcybercriminalusually seek toexploit securityvulnerabilities forsome kind offinancial reward orrevengezerodayattack targeting asoftwarevulnerability whichis unknown to thesoftware vendor orto antivirus vendorsMACAddressa hardwareidentificationnumber thatuniquely identifieseach device on anetworkthreatanything thathas thepotential tocause the lossof an assetavailabilityensures theuptime of thesystem so thatdata isaccessiblewhen neededLinuxopen source andcommunity-developed operatingsystem forcomputers, servers,mainframes, mobiledevices andembedded devicesreconnaissancepractice ofcovertlydiscovering andcollectinginformationabout a systemconfidentialityensures thatdata is notdisclosed tounintendedpersonspenetrationtestingattempt toevaluate thesecurity of an ITinfrastructure bysafely trying toexploitvulnerabilitiesscriptkiddieunsophisticatedthreat actorsthat find andrun attacks theyfind online exploita procedure orproduct that takesadvantage of avulnerability tocarry out a threatnon-repudiationprovidesvalidation ofa message'soriginvulnerabilitya weakness that allowsa threat to be carriedout, such as a USBport that is enabled onthe server hosting thedatabase or a serverroom door that isfrequently left ajarhactivistmisuse a computersystem or networkfor socially orpolitically motivatedreasonsPrincipleof LeastPrivilegeusers andprograms shouldonly have thenecessary accessto complete theirtasksIoTnetwork ofphysical objectsembedded withsensors andsoftwareconnected to theInternet

Cybersecurity Overview - Call List

(Print) Use this randomly generated list as your call list when playing the game. There is no need to say the BINGO column name. Place some kind of mark (like an X, a checkmark, a dot, tally mark, etc) on each cell as you announce it, to keep track. You can also cut out each item, place them in a bag and pull words from the bag.


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
  1. person or entity that attempts or carries out a threat
    threat agent
  2. something that has value to the person or organization
    asset
  3. a series of numbers that identifies any device on a network
    IP Address
  4. extremely sophisticated hacker that is sponsored by or affiliated with a governmental organization
    nation-state
  5. a security approach that combines multiple security controls and defenses to create a cumulative effect
    defense in depth
  6. strategy that allows you to anticipate attack strategies and defend your systems accordingly
    think like an adversary
  7. ensures that data is not modified or tampered with
    integrity
  8. process of extracting user names, machine names, network resources, shares and services from a system
    enumeration
  9. usually seek to exploit security vulnerabilities for some kind of financial reward or revenge
    cyber criminal
  10. attack targeting a software vulnerability which is unknown to the software vendor or to antivirus vendors
    zero day
  11. a hardware identification number that uniquely identifies each device on a network
    MAC Address
  12. anything that has the potential to cause the loss of an asset
    threat
  13. ensures the uptime of the system so that data is accessible when needed
    availability
  14. open source and community-developed operating system for computers, servers, mainframes, mobile devices and embedded devices
    Linux
  15. practice of covertly discovering and collecting information about a system
    reconnaissance
  16. ensures that data is not disclosed to unintended persons
    confidentiality
  17. attempt to evaluate the security of an IT infrastructure by safely trying to exploit vulnerabilities
    penetration testing
  18. unsophisticated threat actors that find and run attacks they find online
    script kiddie
  19. a procedure or product that takes advantage of a vulnerability to carry out a threat
    exploit
  20. provides validation of a message's origin
    non-repudiation
  21. a weakness that allows a threat to be carried out, such as a USB port that is enabled on the server hosting the database or a server room door that is frequently left ajar
    vulnerability
  22. misuse a computer system or network for socially or politically motivated reasons
    hactivist
  23. users and programs should only have the necessary access to complete their tasks
    Principle of Least Privilege
  24. network of physical objects embedded with sensors and software connected to the Internet
    IoT